eMudhra Share Price Slumps 20% Second Straight Day Hits 52-Week Low

eMudhra Faces Severe Share Price Decline Amid Certificate Security Concerns

The ongoing investigation into eMudhra’s digital certificate security has triggered a significant sell-off, pushing its shares to a 52-week low.

Market Reaction to Security Breach

In just two trading sessions, eMudhra’s stock has lost a staggering 36%, reflecting a growing distrust among investors regarding the integrity of its intermediate Certificate Authorities (CAs) used in its global Transport Layer Security (TLS) business. This sharp decline has pushed the stock below its previous low of ₹365.75, which was recorded on March 30, 2026. As of 2:56 PM on Thursday, eMudhra’s shares were trading at ₹348.05, while the BSE Sensex saw a modest decline of 0.66% during the same period.

Details of the Investigation

The investigation was prompted by an advisory from the Indian Computer Emergency Response Team (CERT-In), which warned that private keys associated with eMudhra’s digital certificates were generated with insufficient cryptographic randomness, leading to their potential compromise. This revelation came after Mozilla published a report indicating that private keys linked to eight of eMudhra’s intermediate certificates had been compromised.

eMudhra, a prominent global provider of digital identity and security solutions, has issued over 60 million digital certificates since its inception in 2008. The company operates under a global trust framework, where a limited number of CAs issue digital certificates that web browsers rely on to establish secure connections. The current situation raises significant concerns about the trustworthiness of eMudhra’s certificates and the potential implications for its business.

Company’s Response and Future Outlook

In an exchange filing, eMudhra stated that the issue pertains to eight of its intermediate CAs, which were created during a Key Generation Ceremony (KGC) held on April 30, 2025. A flaw in the KGC resulted in the generation of weak keys alongside the intended strong keys, with the weak keys inadvertently published to browser root stores. eMudhra is actively investigating the root cause of this flaw and has assured stakeholders that its infrastructure remains uncompromised, with no data breaches reported.

Despite the global TLS business representing only about 1% of eMudhra’s overall revenue, the reputational risks associated with this incident could have far-reaching implications. The company is working directly with affected customers to provide replacement certificates to ensure uninterrupted critical services. Furthermore, eMudhra is collaborating with major root programs, including Apple, Google, Microsoft, and Mozilla, as it continues its investigation.

Key Highlights

• eMudhra’s share price has fallen 20% for two consecutive days, reaching a 52-week low.
• The decline follows an investigation by MeitY into the security of eMudhra’s digital certificates.
• Private keys linked to eMudhra’s certificates were reportedly generated with insufficient cryptographic randomness.
• The company has issued over 60 million digital certificates since its founding in 2008.
• eMudhra is working with affected customers to replace compromised certificates.
• The incident may pose reputational risks, despite the global TLS business accounting for only 1% of revenue.

Investor Note: The recent developments surrounding eMudhra highlight the importance of cybersecurity in the digital certificate space. Investors should closely monitor the company’s response to this incident and its potential impact on future business operations and reputation.